IAM Lunch & Learn: Multifactor Authentication

August 19, 2015 Wednesday 12:00-1:00 p.m. 6 Story St, First Floor

• Authentication: Who Are You?

• Authentication: The Challenges

• What Reliable Options are Available?

• Multifactor Authentication in HarvardKey

• Demo: Multifactor Authentication Using Duo

• IAM’s Summer Lunch & Learn Series

• Q & A

2

Today’s Agenda

Introduction: Video

3

• The process of verifying a person’s identity

• Answers the question “Who are you?”

• Often confused with authorization, which answers the question “What are you allowed to access?”

• Usernames and passwords are the most common method of authentication

Authentication: Who Are You?

4

• Computers are not all that good at definitively identifying a specific person

• People are better at it – in a social situation, we are attuned to a myriad of clues that help us determine whether someone is who they say the are

• For example …

Authentication: The Challenges

5

• Asserting your account identity is largely based on something you know — in this case, a password

• What if someone else knows it, too?

• Much of our basic personal information is can be found with online search engines or on social media

What’s So Bad About Passwords?

6

Option: Provide Additional Factors

Something you are

7

Something you have

Something you know

• Multifactor authentication using Duo Security will be available at time of HarvardKey introduction

• Participation is option per user for web applications

• But, some applications may require multifactor authentication for access in the future

Multifactor Authentication in HarvardKey

8

Demo: Multifactor Authentication Using Duo

9

• Setup Duo Multifactor

• Login to an MFA application

• What if you forget your phone?

• Q & A

Demo Application

IAM Summer Lunch & Learn Series

HarvardKey [presentation online]

• August 12

POI Sponsored Affiliations [presentation online]

• August 5

Provisioning• August 26

Sign up online for our last sessions — and encourage your colleagues to attend, too!

iam.harvard.edu/lunch-and-learn

10

Questions?Learn more at iam.harvard.eduContact us at iam@harvard.edu

Thank you!